Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/384eaf38-3a48-43ea-a83c-34de50da4ed0/3a1bd8242bad2ac54b9098e2e592b49a948330b2.roa
File:                     3a1bd8242bad2ac54b9098e2e592b49a948330b2.roa (raw, json)
Hash identifier:          Uncs/dncxvsbE7whrv4JxQNWGMlgJNGBB/D0DiwPpE0=
Subject key identifier:   F6:0E:A4:5A:10:39:B0:E4:DA:28:74:4D:37:35:20:0C:F5:4A:00:7D
Certificate issuer:       /CN=4306c4e56ccb91e8b4e89045e188b60029e8eee7
Certificate serial:       0BA05E
Authority key identifier: BF:9C:97:46:78:4B:99:AF:58:B1:9C:DD:89:62:0D:39:67:8E:46:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4306c4e56ccb91e8b4e89045e188b60029e8eee7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/384eaf38-3a48-43ea-a83c-34de50da4ed0/3a1bd8242bad2ac54b9098e2e592b49a948330b2.roa
Signing time:             Wed 24 Mar 2021 14:39:24 +0000
ROA not before:           Wed 24 Mar 2021 14:39:23 +0000
ROA not after:            Tue 24 Mar 2026 14:39:23 +0000
asID:                     266756
IP address blocks:        45.233.92.0/22 maxlen: 24
                          2803:c720::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 761950 (0xba05e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4306c4e56ccb91e8b4e89045e188b60029e8eee7
        Validity
            Not Before: Mar 24 14:39:23 2021 GMT
            Not After : Mar 24 14:39:23 2026 GMT
        Subject: CN=3a1bd8242bad2ac54b9098e2e592b49a948330b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ca:87:33:bc:ef:cb:91:19:fd:25:15:08:76:
                    22:9d:c0:a4:45:17:6e:a2:57:c8:ce:ed:d4:62:07:
                    1e:e6:87:99:d9:5d:4a:05:33:1d:39:fa:ea:10:25:
                    00:c1:e2:d0:24:30:4f:80:77:e2:c8:6d:71:bd:9e:
                    c3:e3:3e:f0:f1:2f:26:3b:8e:35:bc:d7:b1:6a:1e:
                    86:9a:91:88:80:35:5a:2a:c5:b9:59:a5:97:75:b8:
                    4c:dc:07:2c:c2:92:6f:a4:65:db:b7:4e:1c:d5:6b:
                    4c:f1:ec:c2:2f:9e:34:4f:af:e8:99:cf:31:2a:3f:
                    88:01:bc:7b:44:13:3e:87:ac:11:4f:44:7a:0c:01:
                    8e:aa:0d:eb:3d:fe:4c:14:40:84:a4:ee:c3:60:67:
                    96:2b:88:8e:f2:38:3f:cb:89:1b:e7:59:fe:31:23:
                    59:96:1b:b5:14:42:68:10:be:a9:d6:1f:22:51:53:
                    38:c0:ba:23:fe:87:68:f5:53:86:ae:37:1b:5e:64:
                    3f:ee:62:31:f2:95:98:1c:5a:3d:bb:84:27:67:82:
                    91:21:8a:32:45:c2:2e:10:13:f8:b7:a9:99:7c:68:
                    f5:b3:6b:1f:fc:20:19:3e:a6:90:ad:99:5c:34:35:
                    0a:e1:2f:88:1e:99:a9:86:6a:a5:25:64:cd:af:6c:
                    21:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0E:A4:5A:10:39:B0:E4:DA:28:74:4D:37:35:20:0C:F5:4A:00:7D
            X509v3 Authority Key Identifier:
                keyid:BF:9C:97:46:78:4B:99:AF:58:B1:9C:DD:89:62:0D:39:67:8E:46:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4306c4e56ccb91e8b4e89045e188b60029e8eee7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/384eaf38-3a48-43ea-a83c-34de50da4ed0/3a1bd8242bad2ac54b9098e2e592b49a948330b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/384eaf38-3a48-43ea-a83c-34de50da4ed0/4306c4e56ccb91e8b4e89045e188b60029e8eee7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.92.0/22
                IPv6:
                  2803:c720::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:49:20:6b:1a:ac:ef:aa:c5:3d:4e:61:53:b9:16:4a:f4:db:
         bb:9f:87:14:ff:46:18:94:d6:61:45:f3:2e:f5:c0:c0:81:68:
         92:27:1a:58:b8:77:78:37:9e:50:ca:24:4c:31:96:54:0f:59:
         33:6f:37:fa:70:50:17:6c:e1:83:fc:9f:7d:3c:be:85:f9:d8:
         b7:be:a2:be:97:c3:75:de:2a:da:c9:8b:e4:9a:36:2b:02:30:
         c1:d6:ec:4c:59:bd:05:c9:7c:ca:65:0c:c0:6c:60:27:09:75:
         91:58:ad:16:74:dd:02:fb:12:8a:e2:c0:07:4a:03:f3:0f:fd:
         10:73:d8:e5:5a:1c:77:63:07:cc:65:79:15:36:1c:7a:74:d8:
         48:07:dd:de:c0:93:7e:2d:0c:c0:2b:a8:9c:94:8d:d5:aa:af:
         2e:65:ec:06:39:92:1e:5c:fb:05:e5:be:ed:37:b6:14:68:fe:
         5a:db:9f:e9:7b:ed:46:bc:12:a1:f2:62:40:c8:4c:b6:e9:e6:
         3e:1a:3e:66:58:a5:9d:75:81:b4:7f:42:cf:01:e5:44:23:72:
         cc:bf:f6:e2:25:f2:d0:89:47:3a:0a:a4:90:56:32:81:a2:01:
         17:f1:87:9c:86:ef:63:6d:ae:85:0d:84:c0:06:0a:45:2c:53:
         6d:1d:ec:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----